# Security Policy

## Reporting a Vulnerability

Please report security vulnerabilities through GitHub's private vulnerability reporting:

<https://github.com/osrg/gobgp/security/advisories/new>

Do **not** open a public issue or report to third-party CVE numbering authorities (CNAs). CVEs for this project are managed by the maintainers through GitHub Security Advisories.

## Supported Versions

Only the latest release is supported with security updates.
